General

  • Target

    b879c65d31e9ec637e552e4d6a241a671cf2990a61cc74caac8f5f8d8d815c5e

  • Size

    58KB

  • MD5

    8ef724d7b54553916ba857a0b4e60487

  • SHA1

    a86e0751bfdac3f9357aaa1d0bec5e34e091c802

  • SHA256

    b879c65d31e9ec637e552e4d6a241a671cf2990a61cc74caac8f5f8d8d815c5e

  • SHA512

    c24f8edc8cad4b39fd5883c74bb5f05eff6711ccd7eb81e1064154005f2ab2fc9e26ee06591676d86a76a30ac20b69ddc3f71a083cf531e5969366ea16b5ee46

  • SSDEEP

    1536:PAG6Q01yCT1XkDSK2Fp9ulcoHORoQwCCMmDjXCWL62Yx5Jq:IRQ0UCCDSKAT2couRHwNMajDxY5Jq

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b879c65d31e9ec637e552e4d6a241a671cf2990a61cc74caac8f5f8d8d815c5e
    .zip

    Password: infected

  • f9ffd6e67287669a7d12ef46284919380a3109749d83fe4a5d47757c8fe4e282.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections